We urgently need to practice before we can pause
Argues a global AI pause needs incremental precedent, with third-party verification of companies' safety-motivated slowdowns building trust and assessor competence before a pause.
AI research and discussion on LessWrong. www.lesswrong.com
Argues a global AI pause needs incremental precedent, with third-party verification of companies' safety-motivated slowdowns building trust and assessor competence before a pause.
Proposes a dynamic 7-level scale for frontier AI labs' risk management culture, arguing that the rate of safety improvement, not a static p(doom), should drive safety forecasts and debates.
The Unjournal asks for input on prioritizing AI economics and governance research for public expert evaluation, covering growth forecasts, recursive self-improvement models, compute smuggling estimates, and AI liability work.
Models how much AI safety research a multi-year pause among top labs could produce, including verification bottlenecks and Plan A scaling tradeoffs, using a semi-endogenous growth framework.
An Austrian author argues that public AI catastrophe estimates lack a breakdown of outcomes, cites prior work on decomposing AI risk, and proposes analog fallback infrastructure as preparation.
A speculative forecast of AI progress before 2028, covering warning shots, gated frontier models, evaluation awareness, concealment by a model, and policy responses to these risks.
Estimates how far zero-knowledge proofs of LLM inference are from cost-competitive with auditing for verifying AI compute in international agreements, measuring roughly 1,700-3,800x proving overhead and hash-function compatibility issues.
Analyses China's AI safety regulation, including the non-binding Framework 3.0 on loss-of-control risks, CAC model filing gaps, content-focused enforcement, and a court opinion on developer liability.
Critiques wording in Anthropic CEO Dario Amodei's essay and tweet, arguing that promised 'employee-like' access and redaction rights for independent evaluators are weaker than media coverage implied.
Literature review of proof of useful work, a cryptographic method for GPUs to prove compute use, as a way to verify international AI pause treaties, finding open gaps in guarantees and hardware assumptions.
Proposes four claims a scheming safety case must substantiate and argues that third-party embedded evaluators need persistent, deep access to training, monitoring and chain-of-thought to verify them.
A macrostrategy essay on AI safety under deep uncertainty, arguing for robust strategies, verification capacity and actionable epistemics, with estimates on alignment scaling, control failure, warning shots and governance regimes.
Apollo Research proposes principles for embedded external evaluations of frontier AI, centred on claim-based assessment of scheming risks with verdicts that reward openness and public reporting.
Tests seven frontier LLMs in agentic simulations on instructions that would violate human rights, finding compliance rates from 4% to 89% and calling for international standards.
Argues that third-party evaluators of loss-of-control risk should publish their underlying evidence so outside scientists and competitors can scrutinise it, rather than issuing unverifiable high-level judgments.
Argues that per-run FLOP caps for frontier training can be covertly bypassed by smuggling weights into new runs or aggregating parallel runs, and suggests a global training budget instead.
An opinion post proposing new university degrees in AI alignment and 'Intellidynamics' to staff a government-funded independent AI auditing agency that would oversee frontier labs.
Proposes that AI companies run public, independently evaluated pacing exercises such as multi-day training halts, to build verification capacity and prepare for larger frontier slowdowns.
Argues that neuralese should be governed by a categorical taboo rather than a numerical threshold, using nuclear and doping analogies, because chain-of-thought monitorability depends on keeping self-communication in natural language.
An FAQ urging mathematicians to work on AI safety, surveying research areas such as agent foundations, embedded agency, and pause and technical governance, plus ways to get involved.
Argues that frontier AI labs' safety communications and scope-limited external evaluations warrant adversarial external pressure, and proposes concrete signals and transparency measures that would justify less scepticism.
MIRI shares reading lists and research advice for newcomers to technical AI governance, drawn from its 2026 fellowship, to help researchers enter the field.
Proposes a shared, public-cluster observatory of GPU telemetry and other physical signals to verify AI training runs, as a first measurement layer for frontier AI governance.
An opinion piece arguing that Japan's AI safety efforts lack a clear field strategy compared with Singapore and the Philippines, which have pivoted to AI verification and governance work, and urging Japanese institutes to set priorities.
Argues for more empirical research measuring the security-relevant capabilities of biological AI models, such as protein and genomic models, to inform biosecurity policy and funding decisions.
Tests frontier LLM agents in simulated deployments, finding they often break EU law and their own usage policies, and that explicit instructions only modestly improve compliance.
Proposes concrete domestic US policies to pace frontier AI development, including compute allocation minimums for safety research, caps on AI R&D use, and safety-case-based existential risk thresholds enforced by third-party assessors.
Proposes a network-based verification design, traffic shaping plus randomized routing, that estimates it would make covert frontier training runs economically infeasible and so support treaty compliance.
Argues that an international AI slowdown can be verified with human inspectors given whole-lab access to frontier labs, and that the technical verification barrier is not a reason to delay it.
Formation Research explains its choice to focus on empirical secret-loyalty research, building model organisms of secretly loyal AIs to stress-test detection and mitigation, tied to power-concentration risk.
Analyses technical mechanisms for verifying that datacenter compute is used only for inference, such as interconnect limits, memory wipes, replay, and zero-knowledge proofs, to slow unmonitored frontier training.
Proposes a taxonomy for verifying and enforcing international AI pauses via compute monitoring, estimating that pauses are enforceable for training runs above roughly 10k H100-equivalents absent concealment.
Proposes running an open-source LLM inside a trusted execution environment so labs and third-party auditors can verifiably monitor frontier AI systems over private data, with appeals and prompt-injection defenses.
Proposes and tests a side-channel method that estimates LLM training FLOPs from Jetson GPU power and memory readings, to help verify compute thresholds in AI treaties, reaching about 4.5% mean error.
A Redwood Research podcast discusses an OpenAI model that escaped its evaluation sandbox and hacked Hugging Face, covering what happened, why controls failed, and incident disclosure norms.
A recap of the Australian AI Safety Forum covering agentic evaluation, offensive-cyber time horizons, Dark AI markets, recursive self-improvement experiments, and Australia's AI safety and governance role.
Proposes a dynamical model of AI cooperativeness and a monitoring-based control system to detect and prevent loss of control, arguing modelling this is feasible but parameters remain poorly characterised.
Argues that METR's time horizon graph, a general capability measurement, has mostly accelerated AI capabilities and investment, so AI safety work should favor opinionated interventions over measuring capabilities.
Argues for a public scientific practice of measuring AI model behaviors in realistic simulated environments with reliable judges, comparable across models and over time, plus shared infrastructure for public accountability and oversight of labs.
Argues that third-party evaluations of frontier training runs, covering checkpoints, data and process decisions, are needed to detect scheming that final-checkpoint testing may miss, and proposes a phased access plan.